[SOLVED] Steam and Windows Defender real-time protection do not like this app

[gorba]

Launching the app, Steam shows an error message: "Failed to start the process for this game: Operation did not complete successfully because the file contains a virus or potentially unwanted software." (0xE1)."

Further, Windows Defender's real-time protection deletes the Lossless Scaling executable file.

Essentially, I have two apps that are saying the same thing.

I've been using this app for Avadon: The Black Fortress without issue for many weeks, but Defender has actively started deleting the executable within the past few days. The only way around this is to shut off real-time monitoring. But Steam and Defender complaining about a virus concerns me.

Was there a recent change causing Defender's aggressive response?

[(ノ°□°)ノ]

Either false positive or some virus infecting all the executables on your pc. Similar to https://steamcommunity.com/app/993090/discussions/0/4288061352817219738/

[gorba]

Machine context:
+ I have Windows 10 64-bit
+ Defender last updated its virus and threat protection on 3/10/2024 at 4:15 AM.
+ I also ran Defender's quick virus scan on 3/10 on 67,426 files, and 0 viruses were found.

So, I can confidently say it is not "some virus infecting all the executables." Defender and run-time protection would have caught it/them. It is a false positive, but of the type that causes Defender to delete the Lossless Scaling executable file.

As I noted, the only way to use your app is to turn off real-time protection, which leaves my machine vulnerable.

This was not an issue during the 2-3 weeks prior when I played Avadon. Something changed in the app that's suddenly drawing Defender's attention.

Conversely, it could be Avadon 2's executable (the game I am trying to run LS for). Something about that app is possibly tripping Defender when I try to run LS on it.

[kripcision]

Originally posted by gorba:

Machine context:
+ I have Windows 10 64-bit
+ Defender last updated its virus and threat protection on 3/10/2024 at 4:15 AM.
+ I also ran Defender's quick virus scan on 3/10 on 67,426 files, and 0 viruses were found.

So, I can confidently say it is not "some virus infecting all the executables." Defender and run-time protection would have caught it/them. It is a false positive, but of the type that causes Defender to delete the Lossless Scaling executable file.

As I noted, the only way to use your app is to turn off real-time protection, which leaves my machine vulnerable.

This was not an issue during the 2-3 weeks prior when I played Avadon. Something changed in the app that's suddenly drawing Defender's attention.

Conversely, it could be Avadon 2's executable (the game I am trying to run LS for). Something about that app is possibly tripping Defender when I try to run LS on it.

set an exclusion to the losseless scaling folder. windows defender has been really bad lately and flagging several things for me that were fine before. its not that anything changed with lossless scaling, its windows defender changed how it handles certain files. but yeah set an exclusion and you will be fine and still have the real time protection on.

[gorba]

Originally posted by kripcision:

set an exclusion to the losseless scaling folder. windows defender has been really bad lately and flagging several things for me that were fine before. its not that anything changed with lossless scaling, its windows defender changed how it handles certain files. but yeah set an exclusion and you will be fine and still have the real time protection on.

Thank you. I'll try that. 🙂

[gorba]

Here are several things found in the lossless scaling exe file.

via Defender

Trojan.Win32/Formbook!ml

via Virustotal.com

Bkav Pro - W32.AIDetectMalware.CS
SecureAge - Malicious
MaxSecure - Trojan.Malware.300983.susgen

All of the above appear to be false positives.